RunDLL - błąd przy uruchamianiu systemu

[bobisz]

Witam Forumowiczów, od jakiegoś czasu po uruchomieniu systemu wyskakuje mi irytujący komunikat odnośnie RunDLL.
Przesyłam logi, bardzo proszę o analizę i pomoc w rozwiązaniu problemu

Addition.txt
http://www.wklej.eu/index.php?id=2288ba2b6e

Shortcut.txt
http://www.wklej.eu/index.php?id=afe7f1ea6d

FRST.txt
http://www.wklej.eu/index.php?id=c387d48537

GMER
http://www.wklej.eu/index.php?id=1e89447c89

[mateo8898]

Odinstaluj sweet-page uninstall
Następnie wklej do notatnika:

HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [NeroLauncher] => C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe [67496 2012-08-21] ()
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
HKU\S-1-5-21-1352000420-2832877049-96929670-1004\...\Run: [] => [X]
HKU\S-1-5-21-1352000420-2832877049-96929670-1004\...\Run: [RSA2085521108] => C:\windows\system32\rundll32.exe "C:\Users\Jadwiga\AppData\Roaming\Microsoft\Crypto\RSA\RSA2085521108.dll",DllInitialize <===== ATTENTION
C:\Users\Jadwiga\AppData\Roaming\Microsoft\Crypto
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1433190895&z=1d59a7425fbb3772b22b1e7g8z3cac7g3t6efb4bbe&from=cor&uid=WDCXWD6400BPVT-75HXZT3_WD-WXN1A810113301133
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/?type=hp&ts=1433190895&z=1d59a7425fbb3772b22b1e7g8z3cac7g3t6efb4bbe&from=cor&uid=WDCXWD6400BPVT-75HXZT3_WD-WXN1A810113301133
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1433190895&z=1d59a7425fbb3772b22b1e7g8z3cac7g3t6efb4bbe&from=cor&uid=WDCXWD6400BPVT-75HXZT3_WD-WXN1A810113301133&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/web/?type=ds&ts=1433190895&z=1d59a7425fbb3772b22b1e7g8z3cac7g3t6efb4bbe&from=cor&uid=WDCXWD6400BPVT-75HXZT3_WD-WXN1A810113301133&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1433190895&z=1d59a7425fbb3772b22b1e7g8z3cac7g3t6efb4bbe&from=cor&uid=WDCXWD6400BPVT-75HXZT3_WD-WXN1A810113301133
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/?type=hp&ts=1433190895&z=1d59a7425fbb3772b22b1e7g8z3cac7g3t6efb4bbe&from=cor&uid=WDCXWD6400BPVT-75HXZT3_WD-WXN1A810113301133
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1433190895&z=1d59a7425fbb3772b22b1e7g8z3cac7g3t6efb4bbe&from=cor&uid=WDCXWD6400BPVT-75HXZT3_WD-WXN1A810113301133&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/web/?type=ds&ts=1433190895&z=1d59a7425fbb3772b22b1e7g8z3cac7g3t6efb4bbe&from=cor&uid=WDCXWD6400BPVT-75HXZT3_WD-WXN1A810113301133&q={searchTerms}
HKU\S-1-5-21-1352000420-2832877049-96929670-1004\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.onet.pl/
SearchScopes: HKLM DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1433190895&z=1d59a7425fbb3772b22b1e7g8z3cac7g3t6efb4bbe&from=cor&uid=WDCXWD6400BPVT-75HXZT3_WD-WXN1A810113301133&q={searchTerms}
SearchScopes: HKLM {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1433190895&z=1d59a7425fbb3772b22b1e7g8z3cac7g3t6efb4bbe&from=cor&uid=WDCXWD6400BPVT-75HXZT3_WD-WXN1A810113301133&q={searchTerms}
SearchScopes: HKLM-x32 DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1433190895&z=1d59a7425fbb3772b22b1e7g8z3cac7g3t6efb4bbe&from=cor&uid=WDCXWD6400BPVT-75HXZT3_WD-WXN1A810113301133&q={searchTerms}
SearchScopes: HKLM-x32 {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.sweet-page.com/web/?type=ds&ts=1433190895&z=1d59a7425fbb3772b22b1e7g8z3cac7g3t6efb4bbe&from=cor&uid=WDCXWD6400BPVT-75HXZT3_WD-WXN1A810113301133&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1352000420-2832877049-96929670-1004 {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=7C4EAC7289C5CBCE&affID=119828&tsp=4965
S3 BS2085521108; \??\C:\Users\Jadwiga\AppData\Local\Temp\NTFS.sys [X]
S3 PCDSRVC{3B54B31B-D06B6431-06020200}_0; \??\c:\program files\dell\supportassist\pcdsrvc_x64.pkms [X]
U3 fwddikog; \??\C:\Users\Jadwiga\AppData\Local\Temp\fwddikog.sys [X]
EmptyTemp:

Plik zapisujesz pod nazwą fixlist.txt i umieszczasz obok FRST. Uruchom FRST i kliknij w nim Fix. Powstanie plik fixlog.txt, który podajesz na forum.
Następnie podaj nowe logi z FRST.

[bobisz]

dzięki wielkie, pomogło

shorcut
http://www.wklej.eu/index.php?id=339cf80223

addition
http://www.wklej.eu/index.php?id=78361f24c2

frst
http://www.wklej.eu/index.php?id=d51bc59d86

[mateo8898]

Kroki końcowe:
Wklej do notatnika:

DeleteQuarantine:

Plik zapisujesz pod nazwą fixlist.txt i umieszczasz obok FRST. Uruchom FRST i kliknij w nim Fix

Przeczyść dysk oraz rejestr CCleaner (zakładka Cleaner i Rejestr)

Zainstaluj http://www.instalki.pl/programy/downloa ... hecky.html